31189b476d17ff24313fdde0c7d4bff6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31189b476d17ff24313fdde0c7d4bff6_JaffaCakes118
Size

357KB
MD5

31189b476d17ff24313fdde0c7d4bff6
SHA1

f517fd3694410ab3d0767763468aaa3b1589c9e6
SHA256

9a3a93b719f9ae28d3c60c58eae6029d84f230025f18956fd76b348f32b189ec
SHA512

ae3f3b2def6f7903cda48000df9cadd136dda65285da2cdd29e8ffc8b3eebbdf76c2ebe46c43b6aa8fe859d315c95da6800c95be27668f2bb6f95303c0475a85
SSDEEP

6144:AgOSYxZq1DxYt8Y9Fe/B4+xZq1DxYt8Y9Fe/B:AgO/xPTw4+xPTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31189b476d17ff24313fdde0c7d4bff6_JaffaCakes118

Files

31189b476d17ff24313fdde0c7d4bff6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FHL-BH-Editor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 247B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ